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(|4) Identification of subscribers in a cellular telephone network. 

@ In a cellular telephone network, subscribers 
each have a token (such as a smartcard) by 
means of which they respectively identify them- 
selves to the networi<. Each subscriber logs into 
the network by using his smartcard which in- 
puts a unique identification number (IMSI) into 
the network. The relationship between each 
IMSI and the corresponding subscriber's tele- 
phone number (MSISDN) is random and stored 
in a home location register (HLR). When a 
subscriber activates a mobile using his 
smartcard. a visitor location register (VLR) at 
the relevant cell cheks for presence of the IMS! 
and the corresponding MSISDN. If they are not 
present, it extracts them from the HLR. When a 
replacement smartcard is issued to a sub- 
scriber, the new IMSI is stored in the HLR in 
association with the IMSI of the previous 
smartcard. When the replacement smartcard is 
first used, the relevant VLR will note its absence 
and will follow the same routine as specified 
above - by accessing the HLR. Not only will it 
thus obtain and store the MISISDN for the 
subscriber in association with the IMSI of the 
new smartcard. but this will also activate the 
HLR to note first use of the replacement 
smartcard. cancel all reference to the IMS! of 
the previous smartcard, and inform the adminis- 
tration centre of the network. 






I 

Eing.: 



Dr. Peter Riobling 

Boarb.; 

iVorgsIegt. 


oo 


Q. 

LJJ 


Jouve, 18, rue Saint-Denis. 75001 PARIS 


EP 0 481 714 A2 


The invention relates to teleconnnnunications net- 
works by means of which a plurality of subscribers 
may communicate with each other. Embodiments of 
the invention to be described in more detail below 
comprise such telecommunications networks in the 
form of telephone networks and more especially such 
networks involving mobiles (such as in a cellular net- 
work) which can communicate with each other and 
with fixed telephones via a public switched telephone 
network (PSTN). One such telephone network is the 
planned Pan-European digital telephone network (the 
"GSM" network). 

In the embodiments of the invention to be des- 
cribed, subscribers intending to communicate via 
mobiles will be issued with tokens by which they can 
identify themselves when making a call via the system 
network, such tokens being, for example, in the form 
of so-called "smartcards". Such smartcards carry data 
such as identification numbers and other information 
to ensure the security of the system. From time to 
time, existing subscribers will be issued with replace- 
ment smartcards, to replace those lost, damaged or 
worn by reason of age or use. When a subscriber 
receives such a replacement smartcard, it is desirable 
that he can commence using it immediately if he so 
wishes. It is therefore desirable that the network is 
able to recognise use of a replacement smartcard and 
to react accordingly. 

According to the Invention, there is provided a 
telecommunications networ1< by means of which a 
plurality of subscribers can communicate with each 
other, the subscriber having respective tokens by 
means of which they can respectively identify them- 
selves to the network, each token causing a unique 
Identffication number to be input into the network, 
comprising main storage means having a plurality of 
storage locations each for storing a respective one of 
the identification numbers and an access number cor- 
responding to the subscriber who has the token 
associated with that identification number and by 
which the subscriber may be accessed via the net- 
work, a plurality of subsidiary storage means, acces- 
sing means associated with each subsidiary storage 
means and responsive to an identification number 
input Into the system to check whether data relating 
to it is present In the subsidiary storage means and, 
if it is not. for accessing the said data in the main stor- 
age means and recording it and the corresponding 
access number in the subsidiary storage means, and 
further storage means associated with the main stor- 
age means for storing therein identification numbers 
corresponding to tokens Issued to the subscribers for 
respectively replacing their existing tokens, whereby 
the accessing means responds to the input of an iden- 
tification number corresponding to a replacement 
token not previously used by accessing the corre- 
sponding identification number from the further stor- 
age means of the main storage means and recording 


it and the corresponding access number in the sub- 
sidiary storage means. 

According to the invention, there is further pro- 
vided a method of operating a cellular telephone net- 

5 work in which the subscribers respectively identify 
themselves to the network by means of smartcards 
which carry respective subscriber identification num- 
bers to be input into the network via the relevant cells 
thereof, the identification numbers having a random 

10 relationship with the respective subscribers' tele- 
phone numbers, comprising the steps of setting up, in 
a home location register, storage locations for each 
telephone number each of which locations also stores 
the corresponding subscriber identification number 

15 and other subscriber data, responding to an identifi- 
cation number input at a particular cell by searching 
for that identification number in a visitor location regi- 
ster associated with that cell, responding to absence 
of that identification number from that visitor location 

20 register by accessing the storage location of that sub- 
scriber identification number In the home location 
register and obtaining the subscriber's telephone 
number therefrom and recording that number and the 
corresponding subscriber identification number in the 

25 visitor location register, storing in a special location in 
the home location register the subscriber identifi- 
cation number carried by a replacement smartcard 
issued to an existing subscriber and storing in associ- 
ation therewith the subscriber identification number of 

30 the smartcard previously issued to that subscriber, 
responding to the first input of the identification num- 
ber carried by the replacement card by searching the 
visitor location register corresponding to the particular 
cell at which that input occurs, noting absence from 

35 that register of that subscriber identification number, 
accessing the special location in the home location 
register to obtain the subscriber identification number 
corresponding to that subscriber's previous 
smartcard, recording in the visitor location register the 

40 subscriber identification number of the replacement 
smartcard and the subscriber identification number 
corresponding to that subscriber, and substituting in 
the home location register the subscriber identifi- 
cation number of the replacement card for the sub- 

45 scriber identification number of the previous 
smartcard and cancelling storage of the latter number. 

Part of a cellular telephone network, such as the 
proposed GSM system, embodying the invention will 
now be described, by way of example only, with refer- 
so ence to the accompanying diagrammatic drawing 
which is a block diagram of part of the network. 

The network being described is cellular in oper- 
ation. Communication to and from mobiles in the net- 
work is by radio link between them and respective 

55 base stations, each base station defining a cell of the 
networ1<. When a mobile Is activated, this is signalled 
to the base station of the cell in which the mobile is 
currently located and the network identifies the mobile 
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and records its current location, updating this infor- 
mation as the mobile moves. A mobile can initiate a 
call via its base station and the network to another 
mobile or, via the PSTN (to which the network is con- 
nected) to a fixed subscriber to the PSTN, Similarly, 
calls can be made to the mobile via the network from 
other mobiles or from fixed subscribers to the PSTN. 

In order to enable such calls to be made and 
received, and for call charges to be successfully billed 
to mobile subscribers, it is clearly vital that a proper 
arrangement be incorporated for identifying subscrib- 
ers and ensuring so far as possible that only properly 
authorised subscribers can initiate calls from particu- 
lar mobiles. 

As a means of achieving these aims, the system 
provides each subscriber with a smartcard. The 
smartcard is pre-programmed with a variety of infor- 
mation. In particular, it has a serial number and a 
unique identification number, the "International 
Mobile Subscriber Identity" (IMSI) which is kept sec- 
ure, that is. it is not visible on the card and is not known 
to the subscriber. The card also canries security data 
by means of which the network checks (in a manner 
to be explained) that the smartcard is genuine. 

Each subscriber will also be issued with a publicly 
known number, the MSISDN ("Mobile Station Inter- 
national ISDN Number"). This is the subscriber's tele- 
phone number by means of which calls to that 
subscriber are initiated by other subscribers to the 
system and to the PSTN. 

In order to activate a mobile in the network (so 
that it may make or receive .calls), the subscriber has 
to place his smartcard in a card reader at the mobile 
telephone and. optionally enter an identification num- 
ber (PIN). Provided that the entered PIN is found to be 
correct for that particular smartcard, the mobile trans- 
mits the IMSI (read from the card) to the appropriate 
base station. As will be described, the network then 
carries out a check on the security data on the card 
and provided this check is satisfactory accesses the 
MSISDN and subscription data appropriate to the 
card's IMSI and records the location of the particular 
mobile. 

The MSISDN for that particular subscriber is not 
recorded on the smartcard. It is therefore necessary, 
in a manner to be explained, for the system to store 
the MSISDN associated with the IMSI on that sub- 
scriber's smartcard so that, for example, an Incoming 
call for the particular mobile (which the caller will 
initiate using the called subscriber's MSISDN) can be 
correctly routed. 

Smartcards will be subject to wear through dam- 
age or effluxion of time and arrangements will theref- 
ore be made for automatically issuing each subscriber 
with a replacement smartcard every, say, two years. 
A subscriber may also be issued with a replacement 
smartcard In the event of loss or damage to his card 
or for other reasons. Each smartcard will have a dif- 


ferent IMSI; in particular, a replacement smartcard 
issued to a subscriber will have a different IMSI from 
that of the previous smartcard. 

For efficient and convenient use of the network, 

5 it is desirable that the subscriber can immediately 
start using his replacement smartcard. The network 
must therefore be able to recognise when a replace- 
ment smartcard is first used by a particular subscriber 
and to respond to this by checking its security data, 

10 reacting to its new IMSI so as to associate it with the 
subscriber's (unchanged) MSISDN, and ensuring that 
the smartcard previously used by that subscriber will 
no longer be valid. 

The Figure shows part of the network in simplified 

15 fonm. As shown, there is a plurality of base stations 
(BS) 5, each serving a particular geographical loca- 
tion or cell. A mobile switching centre (MSG) 6 is con- 
nected to a group of the base stations 5 via wire 
connections, each MSG sen/ing some, only, of the 

20 base stations within the total network. Each MSG has 
associated with it a visitor location register (VLR) 8 to 
which it is connected by a wired connection. In addi- 
tion, the system contains a "Home Location Register" 
(HLR) 10. 

25 The HLR comprises fixed data storage having a 

separate storage location for each subscriber. Within 
each such location is stored the MSISDN for the sub- 
scriber and the associated IMSI (that is, the IMSI for 
the currently active smartcard), together with other 

30 data. 

The HLR 10 has associated with it an authenti- 
cation centre (AUG) 12. The AUG 12 is concerned 
with the process of security-checking the security 
data on each smartcard input into the system. Infor- 

35 mation conresponding to this security data is held in 
the AUG for each of the smartcards. 

The subscriber data contained In the HLR is man- 
aged by an administration centre (ADC) 14. 

When a mobile subscriber (MS), as indicated 

40 diagrammatically at 16, is activated, by insertion of 
the subscriber's smartcard, the card is read and its 
IMSI and other data read from the card are signalled, 
by radio, to the MSG 6. The MSG 6 responds to the 
IMSI by checking the VLR 8 for any conresponding 

45 data. It may well be the case that no such correspond- 
ing data is found in the VLR. For example, the mobile 
16 may be temporarily located in a location remote 
from its usual area of movement (it may for instance 
be in different country from its home country), There- 

50 fore, the MSG 6 has to refer to the HLR 10 in order to 
obtain information concerning the subscriber. Here, it 
will find data conrelating the IMSI with the MSISDN of 
that subscriber and this information is transferred to 
the VLR 8 (but maintained in the HLR 10 as well). Bef- 

55 ore such transfer takes place, however, the smartcard 
has to be authenticated using the security data read 
from it. This security data is checked using a 
challenge and response routine. Using the IMSI, the 
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VLR obtains "challenge and response" data from the 
AUC12 and initiates a "challenge" to the smartcard. tf 
the smartcard Issues the correct response, as verified 
by the VLR, this authenticates the smartcard and per- 
mits the transfer to the VLR of the MSISDN and sub- 5 
scription data appropriate to the card's IMSI. The VLR 
also performs a location up-dating procedure, inform- 
ing the HLR of the mobile's current location. 

TheToregoing procedure requires the VLR 8 to be 
able to access the correct location in the HLR 10. A io 
method by which this can be carried out is disclosed 
in our co-pending United Kingdom Patent Application 
No. 9015938. 

If the same subscribersubsequently activates his 
mobile within the location area of the VLR 8, the is 
foregoing procedure is simplified in that information 
relating to that subscriber, In particular, his MSISDN 
and associated IMSI, Is already stored in the VLR and 
does not have to be accessed from the HLR. 

When a replacement smartcard is issued for that 20 
subscriber, the ADC 14 enters certain information into 
a special location in the HLR 10. Specifically, it enters 
the IMSI of the replacement smartcard, and the IMSI 
of the card which it replaces. Information relating to 
the corresponding MSISDN is not stored in this loca- 25 
tion. Appropriate infomiation for authenticating the 
security data of the replacement smartcard, is entered 
in the AUG 12. 

When the subscriber activates his mobile using 
the replacement smartcard, the IMSI of the replace- 30 
ment card will be transmitted to the MSG and the VLR. 
The authentication procedure then takes place, in 
which the replacement smartcard is checked for 
authenticity by means of the security data which it 
stores and In conjunction with security data stored by 35 
the AUG 12 for the replacement card. Assuming that 
authentication is substantiated, the VLR Is then up- 
dated with information relating to the IMSI of the rep- 
lacement card. However, because a replacement 
smartcard is being used, then, by definition, there will 40 
be no data present in the VLR 8. The VLR will there- 
fore react In the same manner as it does on other 
occasions when a mobile attempting to register with 
it inputs an IMSI which is not contained In the VLR. In 
other words, the VLR requests the appropriate infer- 45 
mation from the HLR 10. 

In response to the request, the HLR will have to 
access the special location, because this is the only 
location in the HLR where the new IMSI can be found. 
In response to this, the HLR will recognise that act!- so 
vation of the replacement card has taken place and 
will respond in a number of ways:- 

(a) It will delete the IMSI value for the previous 
card from the main part of the HLR (where it is cor- 
related with the MSISDN and subscription data) 55 
and insert the IMSI value for the replacement 
card. 

(b) It will inform the ADG14. 


714 A2 



(c) If any VLR is already storing information relat- 
ing to the IMSI of the original smartcard, this fact 
will be known at the HLR as will the identity of that 
VLR; the HLR will act to cancel the VLR data 
based on that IMSI. 

(d) It will then cancel the entry in the special loca- 
tion. 

The network then proceeds in the manner des- 
cribed above for the IMSI of the original card. 

The foregoing procedure is advantageous in that 
it relies, at least in part, on the existing procedure by 
which a VLR obtains information from the HLR relat- 
ing to a smartcard not previously recognised. Further- 
more, the procedure requires the active participation 
of the replacement smartcard. This is advantageous 
because it checks the replacement smartcard for any 
faults. If there are faults in the replacement smartcard, 
it is likely that the procedure will not be able to be car- 
ried out satisfactorily. In such a case, it may be 
appropriate for the original smartcard to be re-acti- 
vated. However, this should be done manually rather 
than through any inter-action through the network - in 
order to avoid the possibility that two smartcards for 
the same MSISDN might be validated at the same 
time. 


Claims 

1. A telecommunications network by means of 
which a plurality of subscribers can communicate 
with each other, characterised in that the sub- 
scribers (e.g. 16) having respective tokens by 
means of which they can respectively identify 
themselves to the network, each token causing a 
unique identification number (MSISDN) to be 
input into the network, and by main storage 
means (HLR1 0) having a plurality of storage loca- 
tions each for storing a respective one of the iden- 
tification numbers (MSISDN) and an access 
number (IMSI) corresponding to the subscriber 
who has the token associated with that identifi- 
cation number (MSISDN) and by which the sub- 
scriber may be accessed via the network, a 
plurality of subsidiary storage means (VLR8), 
accessing means (MSC6) associated with each 
subsidiary storage means (VLR8) and responsive 
to an identification number (MSISDN) input into 
the system to check whether data relating to it is 
present in the subsidiary storage means (VLR8) 
and, rf it is not. for accessing the said data in the 
main storage means (HLR10) and recording it 
and the corresponding access number (IMSI) in 
the subsidiary storage means (VLR8). and further 
storage means associated with the main storage 
means (HLR10) for storing therein identification 
numbers (MSISDN) corresponding to tokens 
issued to the subscribers for respectively replac- 
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ing their existing tokens, whereby the accessing 
means (MSC6) responds to the input of an iden- 
tification number (MSISDN) corresponding to a 
replacement token not previously used by acces- 
sing the corresponding Identification number 5 
(MSISDN) from the further storage means of the 
main storage means (HLR10) and recording it 
and the corresponding access number In the sub- 
sidiary storage means (VLR8). 

10 

2. A network according to claim 1, characterised by 
control means responsive to the input of an iden- 
tification number (MSISDN) corresponding to a 
replacement token not previously used for noting 

use of the replacement token and deleting the is 
identification number (MSISDN) of the replaced 
token from the main storage means (HLR10) and 
any subsidiary storage means (VLR8) where it is 
stored. 

20 

3. A network according to claim 1 or 2, characterised 
in that the further storage means stores the iden- 
tification number (MSISDN) corresponding to the 
replacement token in association with the identi- 
fication number (MSISDN) of the previous token, 25 
whereby to enable the accessing means (MSC6) 

to access the part of the main storage means 
(HLR10) storing the access number (IMSI) conre- 
sponding to the relevant subscriber, 

30 

4. A network according to any preceding claim, 
characterised in that each token carries security 
data, and in that conresponding security data 
associated with the identification number 
(MSISDN) of that token is stored in the main stor- 35 
age means (HLR10), and the accessing means 
(MSC6) uses the security data to authenticate 
each token. 

5. A network according to any preceding claim, 40 
characterised in that each token is a smartcard. 

6. A network according to any preceding claim, 
characterised in that it is in the. form of a cellular 
telephone network for mobile subscribers (MS) 45 
and in that the access numbers (IMSI) are the 
subscribers* telephone numbers. 

7. A network according to claim 6, characterised in 

that each subsidiary storage means is a visitor so 
location register (VLR8) associated with one or 
some of the cells of the network, and In that the 
main storage means comprises a home location 
register (HLR10) for at least part of the network. 

55 

8. A method of operating a cellular telephone net- 
work, characterised in that the subscribers re- 
spectively identify themselves to the network by 


means of smartcards which carry respective sub- 
scriber identification numbers (MSISDN) to be 
input into the network via the relevant cells 
thereof, the identification numbers having a ran- 
dom relationship with the respective subscrib- 
ers' telephone numbers (IMSI). and by the steps 
of setting up, in a home location register (HLR10), 
storage locations for each telephone number 
each of which locations also stores the conre- 
sponding subscriber identification number 
(MSISDN) and other subscriber data, responding 
to an identification number (MSISDN) input at a 
particular cell by searching for that identification 
number (MSISDN) in a visitor location register 
(VLR8) associated with that cell, responding to 
absence of that identification number (MSISDN) 
from that visitor location register (VLR8) by 
accessing the storage location of that subscriber 
identification number (MSISDN) in the home loca- 
tion register (HLR10) and obtaining the sub- 
scriber's telephone number therefrom and 
recording that number and the corresponding 
subscriber identification number (MSISDN) in the 
visitor location register (VLR8), storing in a spe- 
cial location in the home location register 
(HLR10) the subscriber identification number 
(MSISDN) canried by a replacement smartcard 
issued to an existing subscriber and storing in 
association therewith the subscriber identification 
number (MSISDN) of the smartcard previously 
issued to that subscriber, responding to the first 
input of the identification number (MSISDN) car- 
ried by the replacement card by searching the 
visitor location register (VLR8) corresponding to 
the particular cell at which that input occurs, not- 
ing absence from that register (VLR8) of that sub- 

- scriber Identification number (MSISDN), 
accessing the special location in the home loca- 
tion register (HLR10) to obtain the subscriber 

. identification number (MSISDN) corresponding to 
that subscriber's previous smartcard. recording in 
the visitor location register (VLR8) the subscriber 
identification number (MSISDN) of the replace- 
ment smartcard and the subscriber identification 
number (MSISDN) corresponding to that sub- 
scriber, and substituting in the home location regi- 
ster (HLR1 0) the subscriber identification number 
(MSISDN) of the replacement card for the sub- 
scriber identification number (MSISDN) of the 
previous smartcard and cancelling storage of the 
latter number. 

9. A method according to claim 8. characterised by 
the step of storing at the home location register 
(HLR10) the identity of each visitor location regi- 
ster (VLR8) in which is stored any particular sub- 
scriber identification number (MSISDN) and the 
corresponding subscriber's telephone number. 
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and responding to the first input of the subscriber 
identification number (MSISDN) carried by a rep- 
lacement smartcard by cancelling the storage in 
each and any visitor location register (VLR8) in 
which is stored the subscriber identification num- 5 
ber (MSISDN) of the previous smartcard. 
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